CVE-2023-27239

Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet

Critical · published March 15, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

🚨 A sneaky stack overflow is lurking in Tenda AX3 routers that could potentially wreak havoc on your network! 🔥 Think of it like an overflowing sink: once that water starts to spill out, it can cause serious damage everywhere. In this case, the shareSpeed parameter is the faucet, and if it’s mishandled, it could flood your system with unpredictable behavior. An attacker could exploit this vulnerability to crash the router or even run malicious code, leading to total network chaos. Imagine someone taking control of your Wi-Fi and monitoring all your activity! The implications could be absolutely devastating. ⚠️

Put simply

Think of it like an overflowing sink: once that water starts to spill out, it can cause serious damage everywhere. In this case, the shareSpeed parameter is the faucet, and if it’s mishandled, it could flood your system with unpredictable behavior. This vulnerability stems from a stack overflow caused by improper handling of the shareSpeed parameter in the /goform/WifiGuestSet endpoint, allowing attackers to manipulate memory allocation and execute arbitrary code.

What to do

An attacker could exploit this vulnerability to crash the router or even run malicious code, leading to total network chaos. Imagine someone taking control of your Wi-Fi and monitoring all your activity! The implications could be absolutely devastating. ⚠️ Immediate action is crucial! Update the Tenda AX3 firmware to the latest version to patch this vulnerability. Regularly check for new updates and consider implementing additional security measures such as network segmentation. 🛡️ You've got this! Stay vigilant and secure your network like the hero you are! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00838 · 57.4th percentile
Published
2023-03-15T00:00Z
EPSS history
Timeline
  • 15 MAR 00:00Z
    Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet
    cvelistv5